Skip to content

docs: clean mkdocs

docs: clean mkdocs #13

Workflow file for this run

name: Pre-scan CI Pipeline
on:
push:
branches: [main]
pull_request:
branches: [main]
schedule:
- cron: "0 0 * * 0" # Weekly security scan
jobs:
security-scan:
name: Security Scan
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.10"
cache: "pip"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e .
pip install bandit safety pipenv
# Static Application Security Testing (SAST)
- name: Run Bandit
run: |
bandit -r jiragen/ -f json -o bandit-results.json
continue-on-error: true
# Software Composition Analysis (SCA)
- name: Run Safety Scan
run: |
safety scan
continue-on-error: true
# Container Scanning
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
scan-type: "fs"
scan-ref: "."
format: "sarif"
output: "trivy-results.sarif"
test:
name: Test
runs-on: ubuntu-latest
strategy:
matrix:
python-version: ["3.10"]
steps:
- uses: actions/checkout@v4
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v5
with:
python-version: ${{ matrix.python-version }}
cache: "pip"
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install tox
- name: Run tests with coverage
run: |
tox